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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the 
application: 

Listing of Claims: 

1. (Canceled) 

2. (Currently amended) A method for booting a computer system, wherein the 
computer system includes a plurality of devices, the method comprising the steps of: 

(a) initia ting a boot sequence in the computer system, wherein the computer system 
further incl udes a BIOS and an embedded security system coupled to the BIOS, wherein the 
embedded security system includes at least one protected control register dedicated to the boot 
sequence, and wherein the initiating step (a) further includes: 

(al) resetting a value in the at least one protected control register to zero; 
(a2) hashing code in the BIOS to produce a BIOS digest value; 
(a3) extending the BIOS digest value to the at least one protected control 
register; and 

(a4) executing the code in the BIOS ; and 

(b) determining whether a first device of the plurality of devices is one of a bootable 

device and a nonbootable device; and 

(c) perfor ming a clean restart of the boot sequence if the device is a nonbootable 
device, wherein the nonbootable device is bypassed during the clean restart . 
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3. (original) The method of claim 2, wherein the determining step (b) further 
includes: 

(bl) hashing code in the first device to produce a device digest value; 

(b2) extending the device digest value to the at least one protected control register; 

(b3) executing the code in the first device; and 

(M) generating an interrupt signal if the first device is a nonbootable device. 



4. (original) The method of claim 3, wherein the computer system includes memory 
for storing the code loaded from the plurality of devices during the boot sequence, and wherein 
the step of performing a clean restart (c) further includes the steps of: 

(c 1 ) clearing the memory; 

(c2) flagging the nonbootable device to instruct the BIOS to bypass the nonbootable 
device during the clean restart; and 

(c3) repeating steps (a) and (b). 



5 . (original) The method of claim 4 further including the steps of: 

(d) booting the first device if the device is bootable, thereby booting an operating 

system. 



6. (original) The method of claim 5 further including the step of: 
(e) verifying the trustworthiness of the boot sequence. 
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7. (original) The method of claim 6, wherein the verifying step (e) further includes: 
(el) providing a predetermined value that represents a trustworthy boot sequence; and 
(e2) comparing the value of the at least one protected control register with the 

predetermined value. 

8. (original) The method of claim 2, wherein the BIOS includes a boot block and a 
main BIOS, and wherein the hashing step (a2) further includes: 

(a2i) hashing code in the boot block to produce a boot block digest value; 
(a2ii) extending the boot block digest value to the at least one protected control register; 
(a2iii) executing the code in the boot block to transfer control to the main BIOS; and 
(a2iv) hashing code in the main BIOS to produce a main BIOS digest value. 

9. (original) The method of claim 3, wherein the generating step (b4) further 
includes executing an INT 18h. 

10. (original) The method of claim 2, wherein the computer system includes a trusted 
computing platform in accordance with the standards defined by the Trusted Computing Platform 
Alliance (TCP A). 

11. (Canceled) 
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12. (Currently amended) A system for booting a computer system, wherein the 
computer system includes a plurality of a devices, the system comprising : 
a processor in the computer system: 

a BIOS coupled to the processor for initiating and executing a boot sequence in the 
computer system: 

wherein the BIOS determines whether a first device of the plurality of devices is one of a 
bootable device and a nonbootable device, and performs a clean restart of the boot sequence if 
the first device is a nonbootable device, bypassing the nonbootable device during the clean 
restart: and 

Th e system of claim 1 1 further including an embedded security system coupled to the 
BIOS, wherein the embedded security system includes at least one protected control register 
dedicated to the boot sequence, wherein a value in the at least one protected control register is 
reset to zero at initiation of the boot sequence, and wherein prior to executing code in the BIOS, 
the BIOS code is hashed to produce a BIOS digest value, which is extended to the at least one 
protected control register. 

13. (original) The system of claim 12, wherein the BIOS determines whether the first 
device is a nonbootable device by hashing code in the first device to produce a device digest 
value, extending the device digest value to the at least one protected control register, executing 
the code in the first device, and generating an interrupt signal if the first device is a nonbootable 
device. 
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14. (original) The system of claim 1 3 further including memory coupled to the 
processor for storing code loaded from the plurality of devices during the boot sequence, and 
wherein if the interrupt signal is generated, the BIOS performs the clean restart by clearing the 
memory, resetting the value in the at least one protected control register to zero, and initiating a 
new boot sequence, bypassing the nonbootable device. 

1 5 . (original) The system of claim 1 4, wherein if the first device is bootable, the BIOS 
boots an operating system. 

16. (original) The system of claim 1 5, wherein the processor verifies the 
trustworthiness of the boot sequence. 

1 7. (original) The system of claim 1 6, wherein the processor is provided with a 
predetermined value that represents a trustworthy boot sequence, and the processor compares the 
value of the at least one protected control register with the predetermined value. 

1 8. (original) The system of claim 1 2, wherein the BIOS includes a boot block and a 
main BIOS and wherein code in the boot block is hashed and extended to the at least one 
protected control register before the boot block code is executed to transfer control to the main 
BIOS, and wherein code in the main BIOS is hashed and extended to the at least one protected 
control register before the main BIOS code is executed. 
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19. (original) The system of claim 13, wherein the interrupt signal is an INT 18h. 



20. (original) The system of claim 12 further including a trusted computing platform 
in accordance with the standards defined by the Trusted Computing Platform Alliance (TCPA). 

21. (Canceled) 

22 . (Currently amended) The comput e r readable m e dium of claim 21 , A computer 
readable medium containing programming instructions for booting a computer system, wherein 
the computer system includes a plurality of a devices, the programming instructions for: 

(a) initiating a boot sequence in the computer system, wherein the computer system 
further includes a BIOS and an embedded security system coupled to the BIOS, wherein the 
embedded security system includes at least one protected control register dedicated to the boot 
sequence, and wherein the initiating instruction (a) further includes instructions for: 

(al) resetting a value in the at least one protected control register to zero; 
(a2) hashing code in the BIOS to produce a BIOS digest value; 
(a3) extending the BIOS digest value to the at least one protected control 
register; and 

(a4) executing the code in the BIOS ; and 

(b) determining whether a first device of the plurality of devices is one of a bootable 
device and a nonbootable device; and 
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fe) performing a clean restart of the boot sequence if the first device is a nonbootable 

device, wh erein the nonbootable device is bypassed during the clean restart . 



23. (original) The computer readable medium of claim 22, wherein the determining 
instruction (b) further includes instructions for: 

(bl) hashing code in the first device to produce a device digest value; 

(b2) extending the device digest value to the at least one protected control register; 

(b3) executing the code in the device; and 

(b4) generating an interrupt signal if the first device is a nonbootable device. 



24. (original) The computer readable medium of claim 23, wherein the computer 
system includes memory for storing the code loaded from the plurality of devices during the boot 
sequence, and wherein the instruction for performing a clean restart (c) further includes the 
instructions for: 

(c 1 ) clearing the memory; 

(c2) flagging the nonbootable device to instruct the BIOS to bypass the nonbootable 
device during the clean restart; and 

(c3) repeating instructions (a) and (b). 



25. (original) The computer readable medium of claim 24 further including the 
instructions for: 
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(d) 

system. 
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booting the first device if the device is bootable, thereby booting an operating 



26. (original) The computer readable medium of claim 25 further including the 
instructions for: 

(e) verifying the trustworthiness of the boot sequence. 

27. (original)The computer readable medium of claim 26, wherein the verifying 
instruction (e) further includes instructions for: 

(el) providing a predetermined value that represents a trustworthy boot sequence; and 
(e2) comparing the value of the at least one protected control register with the 
predetermined value. 



28. (original) The computer readable medium of claim 22, wherein the BIOS includes 
a boot block and a main BIOS, and wherein the hashing instruction (a2) further includes 
instructions for: 

(a2i) hashing code in the boot block to produce a boot block digest value; 
(a2ii) extending the boot block digest value to the at least one protected control register; 
(a2iii) executing the code in the boot block to transfer control to the main BIOS; and 
(a2iv) hashing code in the main BIOS to produce a main BIOS digest value. 
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29. (original) The computer readable medium of claim 23, wherein the generating 
instruction (b4) further includes the instruction for running an INT 1 8h. 



30. (original) The computer readable medium of claim 22, wherein the computer 
system includes a trusted computing platform in accordance with the standards defined by the 
Trusted Computing Platform Alliance (TCP A). 
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